Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
File:                     WTiXF0-WdJDb9hidR53yyTcb9AQ.mft (raw, json)
Hash identifier:          DDBt3XxBGGd3rbrOdtSXbL9BodNBrmOQ1MRuXy4+2Bk=
Subject key identifier:   FB:A9:CA:7B:05:E0:27:32:DD:09:1F:FE:B2:75:FA:4E:C1:0A:41:F3
Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
Certificate issuer:       /CN=593897174f967490dbf6189d479df2c9371bf404
Certificate serial:       01962E2AFA048DFE9E11317E9CE1270A432A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
Manifest number:          0DFD
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: 6EXhvKaYuiSv7QzpiDlEqKp3HxQ.roa (hash: XgOtkTf6/3mw63PcUPKIMiqdp+H34pYiXMAQZ7u4ASY=)
                          2: Bb8ycOE7qhSFoSMHyD2xB85u_Z0.roa (hash: KcdCM+LEn+v24gkqqCtc8motwJZXGA9KFLUTB0+gGg8=)
                          3: WTiXF0-WdJDb9hidR53yyTcb9AQ.crl (hash: +FkxhGUvSpmseyqhN/hWGzE9TTGjd6Wm8UPoq2WSMsg=)
                          4: kTl30QOsbrDzk_mb8ECK1dAhV14.roa (hash: ktEj7/KQdl7DWD89NCLPeaAfOqTe9FU+2FvlPHr9TVM=)
                          5: x4O9V3tAmzZjxZHKXXKdfDf1aNY.roa (hash: F4vKg2iqkGQkTay3EP9VXjOjSKkwkZAg3JC6CDhOzYc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fa:04:8d:fe:9e:11:31:7e:9c:e1:27:0a:43:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593897174f967490dbf6189d479df2c9371bf404
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=fba9ca7b05e02732dd091ffeb275fa4ec10a41f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c3:4b:46:3d:73:d8:ba:2e:f5:22:f8:50:9a:
                    fb:bd:48:ed:15:4f:c2:2c:93:3a:b6:27:d9:6d:0e:
                    8d:62:27:09:e5:0d:f4:6f:02:b7:4f:af:94:01:d3:
                    23:4f:54:8b:8d:e7:6c:c3:e9:19:bb:a1:c8:96:06:
                    13:4b:cf:60:ae:8d:95:f4:4d:64:c7:f4:ef:0a:41:
                    ef:15:26:b3:fa:57:d3:1a:47:41:c2:97:31:94:64:
                    a8:44:ef:03:9c:43:bb:5e:06:f6:ba:61:ab:6c:c8:
                    f7:c6:2e:03:47:8d:26:45:18:ba:1f:3f:58:62:2a:
                    e6:df:4c:7b:ab:fe:02:8d:6b:ee:85:16:3f:93:5e:
                    3c:4f:9f:9b:2f:30:62:a1:69:46:57:62:71:69:4e:
                    f5:b3:f9:b7:52:11:68:a5:00:98:dd:67:1d:63:e6:
                    45:e9:b1:e9:2f:23:df:c0:c3:55:7b:ee:f6:f5:f8:
                    e3:a5:df:c8:2a:05:93:45:51:87:3c:01:4f:11:8b:
                    fb:b9:6e:fb:ca:41:90:f2:73:f9:39:4c:b0:8a:2a:
                    b0:ce:df:c6:77:9e:a3:c5:83:dd:af:99:76:ba:66:
                    35:db:ed:30:89:50:e1:29:f8:d3:0e:1a:3d:9b:95:
                    0a:90:9d:55:4f:a0:2c:a1:25:fe:88:6a:82:da:53:
                    c4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A9:CA:7B:05:E0:27:32:DD:09:1F:FE:B2:75:FA:4E:C1:0A:41:F3
            X509v3 Authority Key Identifier:
                keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e8:30:80:1d:69:25:5d:63:64:9b:e7:6e:0e:38:87:47:85:
         f8:b8:32:b3:e9:63:20:81:1e:6f:db:d6:36:4e:33:d1:7c:07:
         12:50:d0:09:d2:69:5f:f6:83:83:06:81:c0:c6:26:ad:64:05:
         da:23:2a:35:4f:72:f6:57:5b:38:41:75:35:92:27:0e:b5:5b:
         26:30:ab:c6:eb:c4:77:2f:3e:e8:76:f0:6b:90:96:03:0e:2c:
         b0:87:af:f0:4e:7f:09:74:55:81:e0:cf:06:59:30:e6:dd:a3:
         e7:c3:d9:4c:6e:0e:5b:a4:e1:3c:94:d5:11:2c:26:cc:60:c7:
         b6:dc:18:31:bf:95:ef:3a:21:48:37:30:a6:4e:f0:cc:e1:21:
         8b:2c:a3:46:e6:93:d6:2a:f4:78:93:17:b3:c9:b9:d7:bb:15:
         d2:99:04:15:2d:80:0f:50:9f:1e:bc:ef:a8:a9:11:ed:fa:87:
         d8:44:37:be:c3:2e:75:45:24:7e:9c:47:bd:b9:39:1b:aa:d9:
         92:9c:6a:8b:e0:5b:19:2a:9d:01:81:86:97:64:07:58:74:6e:
         42:e0:ee:99:42:ba:26:6f:83:a4:3b:8f:1f:72:e1:1a:eb:f9:
         de:48:06:3c:50:5b:df:1d:d3:cf:b8:73:1d:cd:24:7d:21:00:
         d9:8d:1d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----